CVE-2020-3925

A Remote Code ExecutionRCE vulnerability exists in some designated applications in ServiSign security plugin, as long as the interface is captured, attackers are able to launch RCE and executes arbitrary command on target system via malicious crafted scripts...

Improper access control

An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary files on target system via crafted API parameter...

PT-2020-17802

Name of the Vulnerable Software and Affected Versions ServiSign security plugin affected versions not specified Description An arbitrary-file-access issue exists, allowing attackers to access arbitrary files on the target system via a crafted API parameter, provided they learn the specific API...

PT-2020-17801

Name of the Vulnerable Software and Affected Versions ServiSign security plugin affected versions not specified Description A Remote Code Execution issue exists in certain applications of the ServiSign security plugin. This allows attackers to execute arbitrary commands on the target system via...

PT-2020-17803

Name of the Vulnerable Software and Affected Versions ServiSign security plugin affected versions not specified Description An arbitrary-file-access issue exists, allowing attackers to access arbitrary files on the target system by learning a specific API function and crafting an API parameter...